$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa File: af2ee5ec-ad8c-3308-b351-15c743442c0e.roa (raw, json) Hash identifier: lf4uSW9rejTmdXjMkz+zXtHAPVWk8C6QUvSfwBEl1Rg= Subject key identifier: 4A:56:B6:85:35:A4:52:0B:8E:EE:D5:67:9D:A9:80:C1:72:1A:B7:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA75C5BB50BFB39DDF7E9A760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 36183 IP address blocks: 172.224.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:5b:b5:0b:fb:39:dd:f7:e9:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=ad2c674d-7b17-4993-a38e-4be9359a89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:7a:45:4f:86:14:7c:6f:7f:4c:d4:66:72: 16:dd:a1:37:c9:11:00:c8:c1:f4:7c:44:a9:ef:da: d8:42:e6:12:e4:6d:c7:d5:3d:c8:06:3f:59:c4:f0: 7f:18:f3:a3:cb:c5:86:f5:0f:6d:fb:07:4b:23:14: 58:bf:be:15:63:c7:25:0a:e7:27:96:54:b9:68:38: ae:61:71:9f:8f:8f:66:57:ce:11:74:fe:74:a0:6b: ca:a6:df:4a:4f:e5:f3:04:3a:90:04:28:0a:3c:ce: 7b:f9:14:aa:af:25:0e:56:6f:75:6d:f6:e9:39:18: af:a1:71:00:6f:2a:8a:e9:88:36:9e:6e:46:f8:a9: f4:ea:16:88:00:94:b0:45:7d:bd:51:12:db:47:b1: d6:b0:91:bf:6f:52:a5:c7:44:2c:34:6f:da:21:32: f7:e2:90:30:e3:f0:82:8b:94:51:4f:16:1c:ae:ed: e1:c9:08:f5:56:40:9e:27:a2:49:7e:c3:c3:73:cc: 6b:cb:81:12:e1:2a:77:d0:df:84:e1:0f:87:41:17: 51:ef:7e:e5:cc:b0:ba:7b:21:75:5a:28:74:51:72: ad:b9:24:98:62:84:49:36:5d:7f:be:50:19:3b:20: 0a:b4:0e:2d:7a:17:1b:99:06:50:1a:53:52:40:b6: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:56:B6:85:35:A4:52:0B:8E:EE:D5:67:9D:A9:80:C1:72:1A:B7:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:47:ca:4b:e7:a2:d1:e7:e1:0d:54:81:c9:72:be:68:df:86: 32:23:65:ba:0b:93:05:2c:71:b4:5b:a7:76:71:48:2c:c6:ed: 27:eb:1b:a2:50:dc:e3:c7:e9:f9:e3:3b:f5:5b:b9:ca:a9:7e: 74:c3:27:66:50:9b:1f:fa:6a:94:4e:54:a1:7a:e7:89:55:4a: 38:79:c8:bc:92:0a:76:be:eb:03:39:b9:f7:7b:8c:e4:63:7f: bd:57:0d:e8:ea:eb:db:11:6e:ed:6c:24:57:51:0f:08:75:27: 06:a2:a4:21:eb:43:7e:e9:32:f0:c6:bc:0b:26:7a:2e:2a:bd: e2:98:dc:7c:a8:6b:ee:e9:4e:8b:79:15:d2:33:2e:6c:d4:b0: ae:25:ef:f3:d3:11:bf:84:6f:4d:03:c6:5c:21:4e:e3:2e:04: 4d:9e:e4:cc:c6:aa:c2:f6:24:5b:2a:21:40:4a:21:13:fe:c2: 03:e7:0f:60:78:32:59:8c:22:72:04:db:a0:21:52:b8:53:fc: 60:15:9c:b1:24:01:ea:bf:06:c9:52:1b:8d:67:09:76:d8:32: 2c:53:45:a2:d2:1b:b4:28:42:57:b9:83:33:f6:56:b9:04:f2: a3:17:54:66:8d:49:c6:6f:11:b7:f3:7e:40:e1:81:da:bd:bf: 3a:92:3e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXFu1C/s53ffpp2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk YWQyYzY3NGQtN2IxNy00OTkzLWEzOGUtNGJlOTM1OWE4OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq156RU+GFHxvf0zUZnIW3aE3yREAyMH0fESp 79rYQuYS5G3H1T3IBj9ZxPB/GPOjy8WG9Q9t+wdLIxRYv74VY8clCucnllS5aDiu YXGfj49mV84RdP50oGvKpt9KT+XzBDqQBCgKPM57+RSqryUOVm91bfbpORivoXEA byqK6Yg2nm5G+Kn06haIAJSwRX29URLbR7HWsJG/b1Klx0QsNG/aITL34pAw4/CC i5RRTxYcru3hyQj1VkCeJ6JJfsPDc8xry4ES4Sp30N+E4Q+HQRdR737lzLC6eyF1 Wih0UXKtuSSYYoRJNl1/vlAZOyAKtA4tehcbmQZQGlNSQLYvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpWtoU1pFILju7VZ52pgMFyGrcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYyZWU1ZWMtYWQ4Yy0z MzA4LWIzNTEtMTVjNzQzNDQyYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERHykvnotHn4Q1UgclyvmjfhjIjZboLkwUscbRbp3ZxSCzG7SfrG6JQ 3OPH6fnjO/VbucqpfnTDJ2ZQmx/6apROVKF654lVSjh5yLySCna+6wM5ufd7jORj f71XDejq69sRbu1sJFdRDwh1JwaipCHrQ37pMvDGvAsmei4qveKY3Hyoa+7pTot5 FdIzLmzUsK4l7/PTEb+Eb00DxlwhTuMuBE2e5MzGqsL2JFsqIUBKIRP+wgPnD2B4 MlmMInIE26AhUrhT/GAVnLEkAeq/BslSG41nCXbYMixTRaLSG7QoQle5gzP2VrkE 8qMXVGaNScZvEbfzfkDhgdq9vzqSPuA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:10 2026 by rpki-client